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AMENDED CLAIft^S 



36. (Amended) A method of negotiating an ^ND between a seller and a buyer 

/ 

each possessing a tamper-resistant document carrier having its own public-secret key 
pair, in which the END is stored in the seller's/document carrier in the form of END 
data, and the signature generated by the secreft signing-key of a document carrier of the 
issuer of the END, together with a negotiability status flag indicative of whether the 
END is currently negotiable from the document carrier on which it is stored, 
comprising establishing mutual recogni/ion and verification between the seller and 
buyer using one or more predetermiii<id protocols between the respective document 
carriers; verifying in the seller's document carrier that the negotiability status flag is 
"negotiable" and aborting the negotiation if not; sending the public encryption key of 
the buyer's document carrier to me seller's document carrier, and using it to encrypt 
the message comprising the EI^ together with the negotiability status flag; sending 
that encrypted message to the/buyer; decrypting that message using the buyer's secret 
decryption key, and setting me negotiability status flag for that END of the buyer's and 
seller's document carriers respectively to "negotiable" and "non-negotiable'*. 



/ 50. (Amended) A method according to Claim 48, in which the buyer's 




document carrier, after decrypting me message with its secret key, verifies that the 
END is still valid by taking its time stamp, and, if it has expired, informs the issuer of 
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this, and aborts the negotiation before incrj^menting the counter or setting the 
negotiation status flag. 

51. (Amended) A method according to Claim 49, in which the buyer's 
document carrier, after decrypting tne message with its secret key, verifies that the 
END is still valid by taking its tinie stamp, and, if it has expired, informs the issuer of 
this, and aborts the negotiation be^fore incrementing the counter or setting the 
negotiation status flag. 



